moved authenticate filter to applicaiton controller with skip-filter for invites